This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft File: irCobN7x1oVdGd50F1Nzzcga78w.mft (raw, json) Hash identifier: 9W1xiIpSEquyn6YTu+yuQhxr3+CExZoHR+3zX4/Zc+c= Subject key identifier: 8A:12:5B:F0:DE:02:52:BB:47:E4:56:4D:A9:69:97:BC:12:AB:8F:85 Authority key identifier: 8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC Certificate issuer: /CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc Certificate serial: 019B2EF93596507BF0F45295530F5C651D23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft Manifest number: 0236 Signing time: Thu 18 Dec 2025 01:00:42 +0000 Manifest this update: Thu 18 Dec 2025 01:00:42 +0000 Manifest next update: Fri 19 Dec 2025 01:00:42 +0000 Files and hashes: 1: iDD0dIi8FZu6HOhyS7tjvaUtgQE.roa (hash: 0JHKcL5Vnxkq7EPVZmPbz9exzTMRAeW5CIg2FGWWjPE=) 2: irCobN7x1oVdGd50F1Nzzcga78w.crl (hash: nzW57/knJMnMXnTX/ZZSx0IQmKUoVphBpYk0UGZGlI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:35:96:50:7b:f0:f4:52:95:53:0f:5c:65:1d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc Validity Not Before: Dec 18 01:00:42 2025 GMT Not After : Dec 19 01:00:42 2025 GMT Subject: CN=8a125bf0de0252bb47e4564da96997bc12ab8f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:10:3d:e9:16:a3:3a:e8:2a:8f:44:ed:5c:04: 77:53:8d:a6:f7:60:dd:75:b9:d5:f8:2e:ce:3b:88: c3:73:46:43:d3:bb:cd:57:f2:2b:7f:60:13:1c:51: 8f:8f:54:95:0c:7f:87:87:b4:b5:a2:56:d6:c2:69: 1d:2a:e6:ba:5f:81:3d:30:c7:0e:d0:f2:97:3e:70: 48:10:89:94:ce:bb:30:4b:d9:e9:3f:0c:82:c2:e5: c7:de:62:c0:57:0f:cf:13:ea:e5:7b:cc:49:b6:86: e2:5a:a4:4b:b5:fe:80:a8:62:89:8c:f1:27:67:cd: eb:57:7d:d2:9a:1a:3e:0b:c9:14:9d:20:04:13:46: 3c:97:b5:86:f6:52:b5:a5:1a:00:c6:ba:2f:7a:8f: 6a:24:68:bc:b9:dd:0c:11:9c:29:d7:15:1e:f1:7d: 0b:69:60:f6:62:28:9d:62:37:e5:46:61:78:98:25: b6:a9:e8:a7:4a:5f:2d:5f:98:10:cd:9e:ca:65:9e: de:6a:63:6d:58:30:00:9a:b7:cb:ec:b0:3c:b7:4d: 7f:5c:e6:7a:11:c5:0e:b6:44:97:8b:df:58:cc:ec: 40:57:18:0f:dd:3b:bd:f4:d2:8a:ef:2a:bc:90:5a: 20:18:c7:8f:51:36:d6:79:9e:17:89:ba:24:d7:ad: ab:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:12:5B:F0:DE:02:52:BB:47:E4:56:4D:A9:69:97:BC:12:AB:8F:85 X509v3 Authority Key Identifier: keyid:8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a8:c3:40:fd:19:ca:1b:d1:e1:f0:2b:24:8e:18:bc:60:39: e1:78:25:6f:4c:ce:8b:01:d7:14:e2:36:21:88:d0:df:84:fd: f8:f6:31:1d:20:c0:f4:12:5b:03:0c:53:d9:b9:79:bd:8d:10: 63:11:bb:53:f7:8b:03:55:51:56:51:25:fb:94:7c:e4:7c:ba: fd:1c:bf:fb:fb:48:9c:61:2d:1d:26:25:dd:07:de:ee:e9:80: e3:74:a3:7a:0b:0f:d3:39:02:84:07:5b:2d:1b:75:ec:cb:63: 54:0d:2d:1e:51:9b:ee:61:db:89:d4:0d:43:e7:13:59:ac:b3: b6:36:78:df:23:ed:e1:35:eb:97:33:b2:b0:45:b6:89:e0:e1: b3:20:4e:00:c3:8c:89:c4:08:99:1d:37:e9:99:59:a3:1e:56: 0d:31:fd:e8:41:70:13:61:4f:e7:1d:98:15:01:14:fa:19:9f: ea:5c:ed:b3:e4:d2:60:a6:84:e7:a5:1e:53:12:ca:e9:22:a0: fa:f4:b2:5d:0a:64:35:81:e9:1c:42:0d:f3:20:a6:f0:eb:e3: 23:07:8e:19:79:61:eb:49:91:bd:a3:86:c5:9a:58:04:6f:62: 56:b7:eb:a6:9d:1a:9b:d9:a2:be:43:af:8b:17:ae:a2:bb:c3: 21:44:8c:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+TWWUHvw9FKVUw9cZR0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjBhODZjZGVmMWQ2ODU1ZDE5ZGU3NDE3NTM3M2NkYzgx YWVmY2MwHhcNMjUxMjE4MDEwMDQyWhcNMjUxMjE5MDEwMDQyWjAzMTEwLwYDVQQD Eyg4YTEyNWJmMGRlMDI1MmJiNDdlNDU2NGRhOTY5OTdiYzEyYWI4Zjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxA96RajOugqj0TtXAR3U42m92Dd dbnV+C7OO4jDc0ZD07vNV/Irf2ATHFGPj1SVDH+Hh7S1olbWwmkdKua6X4E9MMcO 0PKXPnBIEImUzrswS9npPwyCwuXH3mLAVw/PE+rle8xJtobiWqRLtf6AqGKJjPEn Z83rV33Smho+C8kUnSAEE0Y8l7WG9lK1pRoAxroveo9qJGi8ud0MEZwp1xUe8X0L aWD2YiidYjflRmF4mCW2qeinSl8tX5gQzZ7KZZ7eamNtWDAAmrfL7LA8t01/XOZ6 EcUOtkSXi99YzOxAVxgP3Tu99NKK7yq8kFogGMePUTbWeZ4Xibok162rFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoSW/DeAlK7R+RWTalpl7wSq4+FMB8GA1UdIwQY MBaAFIqwqGze8daFXRnedBdTc83IGu/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mODIzN2MtZTA0YS00ZGRkLThjZWIt ZDBmMjQ5YmMzZmVkLzEvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mODIzN2MtZTA0YS00ZGRkLThjZWItZDBmMjQ5YmMzZmVk LzEvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKjDQP0Z yhvR4fArJI4YvGA54Xglb0zOiwHXFOI2IYjQ34T9+PYxHSDA9BJbAwxT2bl5vY0Q YxG7U/eLA1VRVlEl+5R85Hy6/Ry/+/tInGEtHSYl3Qfe7umA43SjegsP0zkChAdb LRt17MtjVA0tHlGb7mHbidQNQ+cTWayztjZ43yPt4TXrlzOysEW2ieDhsyBOAMOM icQImR036ZlZox5WDTH96EFwE2FP5x2YFQEU+hmf6lzts+TSYKaE56UeUxLK6SKg +vSyXQpkNYHpHEIN8yCm8OvjIweOGXlh60mRvaOGxZpYBG9iVrfrpp0am9mivkOv ixeuorvDIUSMFg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:53:40 2025 by rpki-client